CVE-2022-49495

drm/msm/hdmi: check return value after calling platform_get_resource_byname()

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/hdmi: check return value after calling platform_get_resource_byname()

It will cause null-ptr-deref if platform_get_resource_byname() returns NULL, we need check the return value.

Patchwork: https://patchwork.freedesktop.org/patch/482992/

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before 9cb1ee33efccb8b107ee04b7b3441820de3fd2daAffected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before c1bfacf0daf25a5fc7d667399d6ff2dffda84cd8Affected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before 0978fcce91b90b561b8c82e7c492ba9fc8440eefAffected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before 2b3ed7547b1a052209da6c4ab886ffe0eed88c42Affected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before d9cb951d11a4ace4de5c50b1178ad211de17079eAffected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before 4cd66a8016b872a153bf892fe4258cbc0dacf5b1Affected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before 6369dda4a2209142ab819f01d3d2076d81e3ebddAffected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before 9f5495a5c51c1d11c6ffc13aa2befffec0c2651aAffected
  • c6a57a50ad562a2e6fc6ac3218b710caea73a58b to before a36e506711548df923ceb7ec9f6001375be799a5Affected
LinuxLinux
  • 4.3Affected
  • before 4.3Not affected
  • 4.9.318 through 4.9.*Not affected
  • 4.14.283 through 4.14.*Not affected
  • 4.19.247 through 4.19.*Not affected
  • 5.4.198 through 5.4.*Not affected
  • 5.10.121 through 5.10.*Not affected
  • 5.15.46 through 5.15.*Not affected
  • 5.17.14 through 5.17.*Not affected
  • 5.18.3 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.